Q-DDOS-GUI

Q-DDOS-GUI DDOS WRITTEN IN C TCP/HTTP/HTTPS ddos written in c . Attack on tcp, http and https protocol. Attack with ddos choosing a random TIMEOUT between a range of seconds or with a defined Timeout. Select the number of threads you want to use. check the stop all box to stop all threads and...

goblin

libgoblin Documentation https://docs.rs/goblin/ changelog Usage Goblin requires rustc 1.85.0 Rust 2024 edition. Add to your Cargo.toml root@kitploit: dependencies goblin = "0.10" Features awesome crate name zero-copy, cross-platform, endian-aware, ELF64/32 implementation - wow! zero-copy,...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

CVE-2023-44487

CVE-2023-44487 CVE-2023-44487를 위한 POC Python으로 작성됨 .env 파일을 편집하여 대상 URL을 입력하고 총 요청 수와 동시성을 수정하세요. 사랑을 담아 -qmvt...

goproxy

GoProxy GoProxy는 Go일명 Golang를 사용하여 맞춤형 HTTP/HTTPS 프록시 서버를 만들 수 있는 라이브러리로, 여러 가지 구성 가능한 설정을 제공합니다. 이 프로젝트의 목표는 합리적인 트래픽 양에서 사용할 수 있는 최적화된 프록시 서버를 제공하면서도 사용자 정의가 가능하고 프로그래밍 가능하게 하는 것입니다. 프록시 자체는 단순히 net/http 핸들러이므로 그 위에 여러 미들웨어패닉 복구, 로깅, 압축 등를 추가할 수 있습니다. 다른 HTTP 네트워크 라이브러리와도 쉽게 통합할 수 있습니다. goproxy...

Zeek-Endpoint-Enrichment

Zeek-Endpoint-Enrichment Zeek ログをホスト情報でエンリッチします。 id フィールドを持つすべてのログをエンリッチするには、タグ ".-all" を使用します。 id フィールドを持つすべてのログと既知エンティティをエンリッチするには、タグ ".-known-all" を使用します。 conn.log のみをエンリッチするには、タグ ".-conn" を使用します。 conn.log と既知エンティティのみをエンリッチするには、タグ ".-known-conn" を使用します。 詳細なドキュメントについては、https://docs.corelight.co...

Modified-CVE-2019-15107

CVE-2019-15107 実行前に、29行目の shellperl の LHOST と LPORT を手動で変更してください。 改変元: https://github.com/ketlerd/CVE-2019-15107...

ssh_scan

sshscan A SSH configuration and policy scanner ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the SSH Scan project. Please fork it to continue development. Key Benefits Minimal Dependencies - Uses native Ruby and BinData to do its work, no heavy dependencies. Not Just a Script -...

h2buster

h2buster v0.4d A fast, threaded, recursive, web directory brute-force scanner over HTTP/2 using hyper, inspired by Gobuster. Features Fast and portable - install hyper and run. Multiconnection scanning. Multithreaded connections. Scalable: scans can be as docile or aggressive as you configure the...

celerystalk

celerystalk celerystalk helps you automate your network scanning/enumeration process with asynchronous jobs aka tasks while retaining full control of which tools you want to run. Interactive Demo: Bug Bounty Mode HackerOne Interactive Demo: Vulnerability Assessment / PenTest Mode Retired...

CVE-2022-0441

CVE-2022-0441 CVE-2022-0441 のチェッカー 使用方法: python3 file.py ターゲットリストを変更してください。...

GHSA-7GWW-X7FH-JF9J LibreNMS: SSRF-driven stored XSS via Oxidized API response fields in device showconfig page

Summary The Oxidized integration URL oxidized.url is admin-configurable. LibreNMS fetches device info and version history from that URL and renders JSON fields name, ip, model, author, commit message into HTML without htmlspecialchars. An admin pointing the URL at an attacker-controlled server...

LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts

Cybersecurity researchers have flagged a previously undocumented Rust-based remote access trojan RAT codenamed LabubaRAT that masquerades as NVIDIA software to blend into target environments. "LabubaRAT creates a reusable foothold for hands-on activity," Blackpoint Cyber researchers Sam Decker an...

SUSE-SU-2026:22365-1 Security update for openCryptoki

This update for openCryptoki fixes the following issues Upgrade openCryptoki to version 3.27 jscPED-14609: Add base support for PKCS11 v3.2. Add support for PKCS11 v3.2 CVerifySignatureInit|Update|Final. Add support for PKCS11 v3.2 CEncapsulateKey/CDecapsulateKey. Soft/ICA/CCA/EP11: Add support f...

CVE-2026-10833 Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurablePrefix' Block Attribute

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'configurablePrefix' Block Attribute in all versions up to, and including, 6.1.4 due to insufficient input sanitization and output escaping. This...

CVE-2026-49260

CVE-2026-49260 affects PhpWeasyPrint prior to 2.5.1. The vulnerability arises from building the WeasyPrint command by passing the binary path through escapeshellarg() and then validating the quoted result with is_executable(); on POSIX systems this makes the bin path string contain quotes, causin...

PT-2026-50965

Name of the Vulnerable Software and Affected Versions PhpWeasyPrint versions prior to 2.5.1 Description PhpWeasyPrint is a PHP library used for generating PDFs from HTML pages or URLs. The software contains a shell command injection flaw occurring when the binary path for WeasyPrint is processed...

[SECURITY] Fedora 44 Update: perl-Crypt-Argon2-0.031-1.fc44

This module implements the Argon2 key derivation function, which is suitable to convert any password into a cryptographic key. This is most often used to for secure storage of passwords but can also be used to derive a encryption key from a password. It offers variable time and memory costs as we...

JDWPEx

JDWP Remote Code Execution Exploit A Python 3 implement...

PT-2026-47556

Impact The Ironic Standalone Operator IRSO is the operator to maintain an Ironic deployment for Metal3. The Prometheus metrics exporter binds to 0.0.0.0 all network interfaces by default with no authentication. The default config is disabled. If enabled, this exposes operational metrics to any ho...